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Claims Amendments: 



1^5 Cancelled. ~ " 

76. (previously presented; currently amended) A method for signing and verifying 
electronic data bv or on behalf of another at server comprising: 

a an authentication step of creating a collection of records about a plurality of 
individuals by entering into a data storage medium a collection of any or a 
imbination of any of the following: 
i. personal information about an individual, 

ii\an indicator of the reliability of thejjdentification of the individual who is 

the subject of a record, 
iii. whether the authentication mode A universal or whether such individual 
must authenticate to the server computer in order to sign electronic data 



using thevserver computer, an 



IV. 



the authentication credential or 



pluraliit 



ly of authentication credentials that 
such individuaKrnust present to the server in order to sign; 



b. an access control step of 

i. receiving a request to stan and, unless the authentication mode is 
universal, an authentication credential or a plurality of authentication 
credentials from a requestor,\nd 

ii. comparing the authentication cr^ential or credentials to the information 
contained in the collection of records to determine if the requestor is an 
individual who is authorized to sign electronic data using the server; 

c. a presentation step of providing to the server an electronic data set for signature; 



d. a transaction identifier step of generating at the server a globally unique 

transaction identifier for the electronic data that a requestor Vends to sign, which 
includes as one input an identifier associated with the requestors identity; 
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e. a\signature step whereby the server encrypts, as the signature of a signer, each 
electronic data set with a unique encryption key, generated from a symmetric 
ciphef\using the globally unique transaction identifier as the character input of a 
password for generation of the key; 

\ 

f. a recording step in which the server generates and stores in a data storage 
medium a record of a signature transaction; 



\ 



\ 



g. a verification step whesreby 



/t^re 



seeking to 1 




an inquiring party seeking to verify the validity of a signature of electronic 
data transmits to a se\er electronic data y tnat is believed to have been 
previously signed at a server; 

the server determines if a record or a plurality of records corresponding to 
the transmitted electronic dataexists in the data storage medium of such 
records; \ 

the server retrieves a record or plurality of records corresponding to the 
electronic data which is presented forverification; 

with regard to each such record, the server performs a verification 
operation which includes a step of reconstructing a symmetric cipher from 
a record of input for a password of a key tharwas used to create an 
encryption key initially, including an identifier orthe signer, and applying 
such symmetric cipher to decrypt an electronic data set; 

v. After decryption, the server reports to an inquiring party, 

1 . whether an electronic data submitted for verification remains 
unmodified since a signature was affixed, and \ 

2. the identity of a signer of the electronic data. \ 



hi 



IV. 
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77. (previously presented) The method of claim 76 wherein the electronic data 
set which is symmetrically encrypted during signature and decrypted upon 
\ verification at a server consists of one of the following: 



a. A message digest or hash of the electronic data; 
^b. A crypto-transformation, created using a private key, of the message 
digest or hash of the electronic data. 

78. (previotaly presented) The method of claimA6 wherein the electronic data 
submitteckfor signature consists of one ojnhe following: 

a. Form input of a signer; 

b. A combination of form input of a sign^afi^ standardized words, 
clauses\or phrases. 

79-98 (cancelled) 

99. (new) An electronic signature method whereby, upon a remote command of a signer, 
a server uses an encryption key\o digitally sign text, a binary object, or a combination of 
form input and a document template, and by means of a signer identifier, a date and 
time parameter, an IP network address, or combination of any of them, or a GUID, 
creates a unique electronic signature fbr or on behalf of the signer. 




100. (new) The method of claim 99 which includes as a preliminary step authenticating a 
signer as authorized to sign. 

1 01 . (new) The method of claim 99 whereby the\erver uses a symmetric key to digitally 
sign. 

102. (new) The method of claim 99 whereby the server\uses a MAC to digitally sign. 



103. (new) The method of claim 99 whereby the server use$ XMLDSIG to digitally sign. 

104. (new) The method of claim 99 whereby the GUID is used^as a password or seed 
for a symmetric cipher that is used to encrypt a message digest as a digital signature. 
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105.\(new) The method of claim 99 whereby the GUID is used as a password or seed 
for a symmetric cipher that is used to encrypt an asymmetric signature value as a digital 



signature. 



\ 

106. (new)Yhe method of claim 99 whereby the GUID is used as a password or seed 
for a symme^c cipher that is used to encrypt the text, binary object, or combination of 
form input and\ document template to be signed as a digital signature. 



107. (new) The method of claim 99 whereby the dkjftaj signature is a detached digital 
signature. 

108. (new) The method V claim 99 whereby a detach* 
data store as a part of a signature transactioru^tSord. 



figital signature is stored in a 



109. (new) The method of claim^ whereby a messaj/e digest is stored in a data store 
as a part of a signature transactioryecord. 



110. (new) The method of claim 99 whereby a symmetrically encrypted message digest 
is stored in a data store as a part of a signature transaction record. 

111. (new) The method of claim 99 whereby asymmetrically encrypted detached digital 
signature value is stored in a data store as a pakof a signature transaction record. 

1 12. (new) The method of claim 99 whereby the server sends a notification to a signer 
or her designee of the occurrence of a signature transaction. 

113. (new) The method of claim 99 whereby a human beir^ is a signer on whose behalf 
a signature is affixed. 



1 14. (new) The method of claim 99 whereby a computerized agent is a signer on whose 
behalf a signature is affixed. 
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1 15.\(new) The method of claim 99 whereby a business or governmental entity is a 
signenpn whose behalf a signature is affixed. 




IV. 

v. 
vi. 




1 16. (new) Amethod to electronically sign text and objects (defined as files, documents, 
or transaction o^ta) for and on behalf of another comprising: 

a. a website for signing that includes 
a^lock for determining date anytime values, 
at l&sst one web page to present and displayto a user for inputting 
information and submitting it to sai^sefver computer; 
an encryption key 
a hashing algorithm, 

an optional file or data store with af least one template with prepared 
text; and 

a data store for th\ storage of a plurality of records of signature 
transaction data; 

b. a signer with a computer or handheld computing device having a display to 
view information provided by such web server and a keyboard, keypad, 
touchscreen, touchpad, or stylus tdJnput text and a pointing device; 

c. a network connection between the computers; 

d. said method further consisting of the foNowing steps: 
i. said website providing an electronic f\m to a signer, said form having a 

plurality of inputs to: 

1 . identify a signer; 

2. identify a credit card to charge for th& service; 

3. provide character input for text, and/or\o upload at least one 
object to be signed; 

4. supply a password or personal identification number where 
authentication of identity by means of a password or personal 
identification number is required; and 

5. submit the other inputs to said server; 
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ii. where authentication of a signer's identity is required before signature, a 
v processing unit of said website comparing an inputted password, 

\ personal identification number, digital certificate, biometric identifier, or 
\ combination thereof, with a stored record before taking any further action 
^on the basis of such authentication; 

iii. where authentication of a signer's identity is established or is not 
required, / 

1\ where text has been inputted by\a signer for combination with a 



ransaction template at a sej^er C|f said website for signature, 
combining said text with a transaction template and displaying the 
combination to the signer as input\to be signec^ 

2. by means of said message digestiria^lgcffithm, calculating a 
message digest of eachjn^uWcT^e signed; 

3. by means of said encryption key, generating an encrypted value of 
each said message digest; 

4. displaying a yvarning that activatiorfof a displayed input to sign will 
operate as a binding signature of the signer and offering a 
displayed alternative input to cancel a further signature operation; 

5. upon activation of ssaid displayed input to sign, said server creating 
a signature transaction record and storing the same in a data 
store of signature transaction records. 

6. transmitting a receipt anci proof of signature containing the unique 
signed data and signature\alue to the signer. 



117. (new) The method of claim 116 wherein an encrypted message digest is a 
detached digital signature. 



118. (new) The method of claim 1 16 wherein the detached\(igital signature is encrypted 
by means of a symmetric key. 

119. (new) The method of claim 116, wherein data that associates the identity of an 
authorized signer with the entity's digital signature is a signature transaction record 
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consisting of a message digest and encrypted message digest of the data, and 



optionally, one or a plurality of the following; 



\ 



a. a date of signature, 

b. a time of signature, 

c. ^ generated nonce, 

d. a\redit card authorization, 

e. a network address from whence a request to sign originated, 

f. the signer's name identifier; 

g. a unique identifier assigned to the signature transaction record; 

h. an email^address of the signer; 

i. one or a plurality of properties of a ifigitial certificate issued to the signer; 
j. a representatipn of one or a plurality of biometric identifiers of the signer. 



1 20. (new) The method ofdaim 1 1 8 whereip4H§[symmetric key is derived from a 
password or seed of composed of one or a plurality of values, or message digest 
thereof, contained in the signature transaction recird. 

1 21 . (new) The method of claim 1 \8 whereby^ confirmation of a signature transaction 
is transmitted to a signer from a remote signing computer as proof of an authentic signature 
transaction. 



122. (new) The method of claim 121 wherebyoipon receipt, the proof of an authentic 
signature transaction is subsequently signed by a recipient using a private asymmetric key 
associated with a digital certificate of the recipient as atj act of signature. 

123. (new) The method of claim 1 16 wherein the menage digest is encrypted by 
means of a symmetric key. 



124. (new) The method of claim 123 wherein the symmetriC\key is derived from a 
password or seed of one or a plurality of values, or message digest thereof, contained in 
the signature transaction record. 
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125. Vnew) The method of claim 116 wherein the data submitted for signature consists 
of one or a plurality of the following: 



\ 



a. 




data that is supplied by a user to a remote computer 
through submission of one or a plurality of inputs to one or 
a plurality of forms, 

data that is supplied by a user to a remote computer 
through submission of one aria plurality of inputs to one or 
a plurality of forms, in combination with a template supplied 



by a remote computer, 
file, 
essage, 



a message digestp 
transaction data, 



e. a d\?ument, 
f. 

g. 

XML data, 
programming^code, 
a document containing mark-up, 
k. one or a plurality of units of currency, 
I. a legal document, 
m. a medical record, 
n. a prescription, 
o. a promise, 
p. a promissory note, 
q. a contract, 

r. a mortgage or deed of trust, 
s. a purchase order, 
t. text, 

u. one or a plurality of numbers, 
v. a conveyance, 
w. a transaction record, 
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\ A 

x. one or a plurality of dates, ' \ 
y. a check or motaey order, 
z. binary data. \ f 



1 26. (new) The method of claim 1 1 6 whereby uptfl\a successful signature verification, 
the remote computer sends a message as proof of a verifi^signature transaction. 
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